12 matches found
EUVD-2024-30480
Malicious code in bioql PyPI...
CVE-2024-32693
Cross-Site Request Forgery CSRF vulnerability in ValvePress Automatic.This issue affects Automatic: from n/a before 3.93.0...
Exploit for SQL Injection in Valvepress Automatic
CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Injection i...
Exploit for SQL Injection in Valvepress Automatic
MASS-CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Inject...
Exploit for SQL Injection in Valvepress Automatic
CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Injection i...
VulnCheck KEV: CVE-2024-27956
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic through 3.92.0...
CVE-2024-32693
Cross-Site Request Forgery CSRF vulnerability in ValvePress Automatic.This issue affects Automatic: from n/a before 3.93.0...
CVE-2024-32693
CVE-2024-32693 is a CSRF vulnerability in the WordPress WordPress Automatic Plugin (ValvePress Automatic) affecting versions prior to 3.93.0. The CVSS 3.1 vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L with a base score of 7.6 (HIGH). Impact: confidentiality is Low, integrity is High, ava...
CVE-2024-27956
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0...
CVE-2024-27956
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0...
CVE-2024-27956
Summary of CVE-2024-27956 (WordPress WP Automatic SQLi) : The WP Automatic plugin (WordPress) is vulnerable to unauthenticated SQL Injection, affecting versions up to 3.92.0 (and variants noting patch to 3.92.1). The underlying issue is insufficient input handling in the plugin’s SQL queries, ena...
PT-2024-3159
Name of the Vulnerable Software and Affected Versions ValvePress Automatic versions prior to 3.92.1 Description The issue is related to an SQL Injection vulnerability that allows attackers to execute arbitrary SQL commands. This can lead to site takeovers and malicious activities. The vulnerabili...